dhi.io/kube-proxy
Kubernetes Proxy 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.12-debian-fips-dev, 1.34.12-debian13-fips-dev, 1.34.12-fips-dev, v1.34.12-fips-dev
sha256:5fae65ec1ca453feae1be5f8222ccb6d408c0102c1b089b6262f5598f17ef473
Manifest digest:sha256:c2430b0f4c662e13f317e4174b21d26f472b28dfe70dc8767bf464b0e21124e1
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-proxy:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-proxy:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-proxy@sha256:07c7928beb9e7f7ff18c23b4957d5d11f36673b52b9b3e90ed3764beb3365b41 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-proxy@sha256:2dcb500da476f840fefe7f25e499de4afaa2c6a936db7cf4471f76740d7ccb42 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-proxy@sha256:78b89881a24d7fb4fc6fc68bf95cf3f69216abf4af163facc9f0aa24c6b212c9 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-proxy@sha256:1e6669c914e9f06e9627e4d561b0766cd511916171e6ecffc31308b4dfd799ba |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-proxy@sha256:a7a10334911a8847fa888ff0c7dd667adb2f55e101e0eae5c568653d5857510a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-proxy@sha256:05f0b43bd22526579b7f0613fbff675a0a805595b5fd164d3e7e787690a375a9 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-proxy@sha256:f9fedc7ee1a7a0728f1781e529b122d57f4d3a4bf739fcb6ffdd42642c0bbd2c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-proxy@sha256:072d3ee9483f8f982fe6a025343f9be54e235f37060a826bdfea331e00254baa |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-proxy@sha256:4fa7c23c53a3d55c540c884db1f238687068c58379a031c8b3deff82cf67f934 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-proxy@sha256:b880372417d517a6591a484571b11fdda0951001be27895b6f1e8dbd1ac7a764 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-proxy@sha256:44e6daa55b2d23e2518099dcc877040966dde1ccb2ce32c9976878ecf685d2f5 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-proxy@sha256:58fda0ec3e2c5d26569a93b3d00ac0cf4364666f8b3c0bdc4cecfdc0a1626094 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-proxy@sha256:428f0da273e8de648cabec5ce9e99d65c006890dd99c53efac0214d46e0ff8eb |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-proxy@sha256:f0df5de7cd203c99687e92dcc7afc50a28e4a955d0c9e9152a94be52d951da91 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-proxy@sha256:db93b444eb28bd55f5d815756dcd65a0f19a7b57f03cf8391364ddea6472dcf1 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-proxy@sha256:69ab1d8990bfd5cfcebc53c1cd91069418c5482e8081ad801ee5a93f17fdeebf |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-proxy@sha256:7a68537068877934232854d58114e3314013c1df5896eaa3e3b682c611783619 |